107 drata jobs at 94 companies in United States

2w
Save
Mark Applied
Hide
Security & Compliance Operations Manager
San Francisco, California, United States
$120k-$180k/yr OnsiteFull Time
Mintlify
Mintlify: AI-powered platform for generating and hosting software documentation.
3+ YOE3+ years GRC/compliance program management with direct audit ownership, hands-on Drata (or Vanta) administration, vendor and auditor management, strong follow-through and automation bias.
Drata, Vanta
3w
Save
Mark Applied
Hide
Senior Security Engineer
Indianapolis or United States
RemoteFull Time
Entegrata
Entegrata: Provides an Azure-based data lakehouse platform for law firms.
Hands-on Azure cloud security, Entra ID and EDR experience, detection engineering with KQL, SOC 2/Drata compliance ownership, and ability to run security reviews and incident response.
Azure, Defender for Cloud, KQL, Log Analytics, Azure Monitor, Event Hub, incident.io, Entra ID, SentinelOne, Microsoft Defender, Sophos, Microsoft Intune, Drata, Pulumi, Bicep, GitHub Actions, AKS, Container Apps, Azure SQL, Databricks, Data Factory, Key Vault, PowerShell, Bash, Go, Azure SDK
2d
Save
Mark Applied
Hide
Senior Trust and Compliance Analyst
United States or Georgia
$125k-$145k/yr RemoteFull Time
First Advantage
First AdvantageNASDAQ: FA: Provides employment background screening and digital identity verification services.
1+ YOE1+ years compliance/risk experience; familiarity with SOX, SOC 2, ISO 27001, NIST; experience with Trust Center platforms (Drata, Vanta) and control automation; strong communication and analytical skills.
SOX, SOC 2, ISO 27001, NIST, Drata, Vanta
2w
Save
Mark Applied
Hide
GRC Engineer - Platform Team
Berlin or Iași or London or New York City or São Paulo
HybridFull Time
Taktile
Taktile: Platform for automated financial risk and credit decisioning.
4+ YOE4+ years GRC or security compliance at a SaaS company; owned SOC 2 program; Vanta/Drata/Secureframe experience; hands-on scripting against AWS for automated evidence; strong written communication.
AWS, Vanta, Drata, Secureframe
1mo
Save
Mark Applied
Hide
IT Systems Administrator
San Francisco, California, United States
$120k-$160k/yr HybridFull Time
Substack
Substack: Platform for independent writers to publish and monetize newsletters.
3+ YOE3–5 years in corporate IT/systems administration; hands-on Okta and Apple-focused MDM experience (Iru/Kandji/Jamf); familiarity with SOC 2 and compliance platforms (Vanta/Drata); strong communication and documentation skills.
Okta, SSO, SCIM, Iru, Kandji, Jamf, Vanta, Drata
1w
Save
Mark Applied
Hide
Senior Consultant - SOC 2 & ISO 27001 Services
United States
RemoteFull Time
RISCPoint
RISCPoint: Provides cybersecurity compliance, cloud security, and risk management advisory.
3+ YOE3+ years supporting or leading cybersecurity compliance engagements; experience with SOC 1/2, ISO 27001, HITRUST, HIPAA; familiarity with Vanta/Drata and cloud platforms; bachelor’s or master’s degree preferred; industry certifications preferred.
Vanta, Drata, AWS, Azure, Google Cloud Platform
3w
Save
Mark Applied
Hide
Senior GRC Analyst I, SOC 1 & SOC 2
United States
$66k-$101k/yr RemoteFull Time
Sensiba
Sensiba: Global accounting, tax, and business consulting firm.
3+ YOEBachelor's degree, 3+ years IT/audit experience, SOC 1 & SOC 2 audit experience, controls review and design, experience with SOC readiness platforms (Drata, Vanta) preferred, relevant certifications (CISA, CISSP, CIPP) a plus.
Drata, Vanta, Electronic Medical Records (EMR)
1mo
Save
Mark Applied
Hide
SOC 2 Type 2 Five-TSC SaaS / Cloud Compliance Lead
Silver Spring, Maryland, United States
HybridFull Time
For Your Information, Inc.
For Your Information, Inc.: Provides HR and IT services to federal government agencies.
8+ YOE8+ years in cybersecurity/GRC/IT audit with direct SOC 2 Type 2 audit experience, GRC platform experience (Drata preferred), SaaS/cloud expertise, evidence review, strong written communication, and stakeholder coordination skills.
Drata, Vanta, SecureFrame, Hyperproof, Jira, Confluence, AWS, Azure, GCP, CI/CD, SAST, DAST, SCA, IAM, MFA, vulnerability management, PCI DSS
2w
Save
Mark Applied
Hide
GRC Program Manager - Remote
United States
$110k-$143k/yr RemoteFull Time
Velera
Velera: Integrated fintech and payment processing solutions for credit unions.
8+ YOE8+ years in cyber GRC or related fields, 5+ years in GRC program management, experience implementing GRC tools (Optro,Vanta,Drata,OneTrust), PCI/NIST/SOC audit experience, strong stakeholder and program skills.
Optro, Vanta, Drata, OneTrust
1w
Save
Mark Applied
Hide
Senior IT & Business Continuity Manager
Austin or Denver or Indianapolis or Los Angeles or San Francisco or New York or Salt Lake City or Minneapolis or Seattle or Nashville
$135k-$150k/yr RemoteFull Time
Givebutter
Givebutter: Fundraising and CRM platform for nonprofit organizations.
5+ YOE5+ years IT experience; hands-on IT ops (MDM, device and SaaS administration, identity lifecycle), Notion administration, GRC project management with Vanta/Drata, familiarity with SOC 2/ISO 27001/PCI, remote/Mac environment experience.
Vanta, Drata, Notion, Google Workspace, Slack, 1Password, Mobile Device Management (MDM), Claude, Cursor, ChatGPT
1mo
Save
Mark Applied
Hide
GRC SECURITY ANALYST
Reno or United States
$114k-$139k/yr RemoteFull Time
Clear Capital
Clear Capital: AI-driven real estate valuation and property data solutions.
3+ YOE5+ years GRC/risk/compliance experience with Bachelor’s (or 3+ years with Master’s) or equivalent; deep knowledge of NIST, ISO, SOC 2, GLBA/CCPA/GDPR; relevant certifications (CISSP, CISM, CISA, CRISC, AIGP); familiarity with Vanta, Drata, OneTrust, cloud and DevOps; strong analytics and communication.
NIST CSF, NIST RMF, ISO 27001, ISO 27002, ISO 42001, SOC 2, GLBA, CCPA, GDPR, Vanta, Drata, OneTrust, DevOps, cloud computing
2mo
Save
Mark Applied
Hide
Compliance Team Lead
Salt Lake City, Utah, United States
$100k-$120k/yr OnsiteFull Time
Sensor Tower
Sensor Tower: Provides digital market intelligence and mobile app analytics software.
3+ YOE3–6 years in compliance or legal operations; CLM (Ironclad); compliance automation (Drata); DDQ management (Conveyor); KYC/AML and sanctions screening; SOC 2 support; project management; GTM/legal tech experience; Bachelor’s degree or equivalent; paralegal/JD/compliance certifications a plus.
Contract Lifecycle Management (CLM), Compliance automation tools, DDQ management, KYC/AML tools, Sanctions screening tools, SOC 2 controls
1mo
Save
Mark Applied
Hide
Sr. Security Engineer, Corporate Information Security
New York City, New York, United States
$165k-$185k/yr HybridFull Time
Betterment
Betterment: Automated investment management and retirement planning platform.
6+ YOE6+ years security engineering experience with deep IAM expertise; strong knowledge of authentication protocols, endpoint hardening, vulnerability management, automation (Python/Go), and SOC 2/ISO 27001 compliance.
Okta, Entra ID, Google Workspace, Slack, Atlassian, Glean, Glean Assistant, Jamf, ChatGPT, Claude, Abnormal Security, Proofpoint, Wiz, Vanta, Drata, Python, Go, CyberArk, BeyondTrust, Delinea, Saviynt, SailPoint, ConductorOne, Lumos, HashiCorp Vault, Doppler, OPA, Rego, EDR, ZTNA, SAML, OIDC, OAuth, SCIM, LDAP, RBAC, PIM, CIS, SOC 2, ISO 27001, NIST, MDR
3mo
Save
Mark Applied
Hide
Senior Governance & Risk Analyst
Dallas, Texas, United States
HybridFull Time
Lantern
Lantern: Connects employees to high-quality surgical, cancer, and infusion care.
5+ YOE5+ years GRC/compliance/InfoSec; 3+ years healthcare/healthtech; degree in information security, CS, or related; experience with risk registers, HITRUST/SOC 2, HIPAA, NIST CSF, AI RMF; GRC tools.
GRC platform, Vanta, Drata, ServiceNow GRC, OneTrust
1w
Save
Mark Applied
Hide
Senior IT Manager
New York City or United States
$165k-$195k/yr RemoteFull Time
Pomelo Care
Pomelo Care: Virtual healthcare provider for mothers, infants, and women.
7+ YOE2+ Mgmt7+ years in IT support/operations with 2+ years managing teams; hands-on experience with Okta, Google Workspace, Slack, Iru or Jamf; HIPAA and SOC 2/HITRUST familiarity; strong communication and customer service skills.
Okta, Google Workspace, Slack, Iru (formerly Kandji), Jamf, Vanta, Drata
1mo
Save
Mark Applied
Hide
Senior Security Engineer, GRC
United States
$180k-$225k/yr OnsiteFull Time
Temporal Technologies
Temporal Technologies: Durable execution platform for building resilient, scalable cloud applications.
8+ YOE8+ years in GRC or info security compliance, hands-on experience with major frameworks (SOC2, ISO 27001, HIPAA, PCI-DSS, FedRAMP), managing high volumes of security questionnaires (SIG, CAIQ), scripting/automation (Python, Bash), strong customer-facing and risk assessment skills.
Python, Bash, Vanta, Drata, Sprinto, SOC2, ISO 27001, HIPAA, PCI-DSS, FedRAMP, NIST CSF, NIST 800-53
6d
Save
Mark Applied
Hide
IT Audit Consultant (SOC 1 / SOC 2)
United States
RemoteFull Time
BARR Advisory
BARR Advisory: Performs cybersecurity audits and risk management consulting services.
3+ YOEBachelor's or equivalent; 3+ years IT audit/cybersecurity compliance experience; 2+ years leading SOC 1/SOC 2 engagements; knowledge of AICPA TSC; cloud experience (AWS/Azure/GCP); strong communication and mentoring; able to obtain industry certification within one year.
AWS, Azure, Google Cloud Platform, Vanta, Drata, Secureframe
3w
Save
Mark Applied
Hide
Sr. Security Controls & Compliance Engineer (Contract)
United States
RemoteContract
UP.Labs
UP.Labs: Builds and scales mobility-focused startups with corporate partners.
7+ YOE7+ years in security engineering/DevSecOps with hands-on control implementation, SOC 2 readiness experience, compliance automation platform operation, identity/cloud/SDLC controls implementation, and familiarity with GitHub, Okta, Google Workspace, Slack, and major cloud providers.
Vanta, Drata, Secureframe, GitHub, Jira, Linear, Okta, Google Workspace, Slack, AWS, Azure, GCP, CI/CD
2w
Save
Mark Applied
Hide
Director of IT & Security Operations
United States
$150k-$160k/yr RemoteFull Time
RealTime eClinical Solutions
RealTime eClinical Solutions: Provides cloud-based clinical trial management software solutions.
Extensive experience operating SOC 2 and HIPAA controls, cloud and infrastructure-as-code (Terraform), identity and access management, SIEM and incident response, and leading IT/security teams.
Terraform, SIEM, AWS Bedrock, Git, GitHub, Subversion, Vanta, Drata, CI/CD
3w
Save
Mark Applied
Hide
Senior GRC Analyst
Atlanta or United States
$110k-$120k/yr RemoteFull Time
PrizePicks
PrizePicks: Operates a daily fantasy sports and player prediction platform.
5+ YOE5+ years GRC/InfoSec/IT audit experience; experience with SOC 2, ISO 27001, PCI-DSS, NIST, GDPR; audit coordination, TPRM, policy management, GRC tooling experience, strong communication and project management.
Vanta, Drata, Archer, OneTrust, ServiceNow GRC